CVE-2026-46199

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds (OOB) read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memory.

This vulnerability is rated as having a Moderate impact because exploitation requires local authenticated access and only affects environments equipped with AMD graphics hardware utilizing Video Core Next 4.0 architecture. While an attacker with local access to the GPU device node could trigger out-of-bounds memory inspection during message decoding, typical Red Hat enterprise server deployments do not employ these specific graphics processing units. Systems lacking the corresponding AMD GPU hardware or running without the amdgpu driver loaded are not susceptible to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.